CVE-2025-4038 MEDIUM

CVE-2025-4038: code-projects Train Ticket Reservation System reservation stack-based overflow

Vendor Code-Projects
Product Train Ticket Reservation System
Weakness CWE-121
Published April 28, 2025
Last update April 28, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability was found in code-projects Train Ticket Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is the function Reservation of the component Ticket Reservation. The manipulation of the argument Name leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

April 28, 2025 CVE published
April 28, 2025 Record updated